Senior Security Engineer (all genders)

About This Opportunity

We are representing a confidential B2B SaaS organization serving the construction technology sector. Our client's platform handles business-critical data for thousands of daily users, and they need a senior security professional to own security end to end as they continue scaling across Europe.

This is a hands-on senior individual contributor role based in Munich with a hybrid work model (3 days on-site, 2 days remote). You'll build security guardrails that engineering teams adopt because they work, not because they're mandated.

Responsibilities

• Own product and cloud security end to end: threat modeling, security reviews, secure-by-default patterns, and tooling in CI/CD pipelines (SAST, dependency scanning, container scanning, secret detection)
• Harden AWS infrastructure including IAM architecture, network segmentation, encryption, logging, and workload security—encoding baselines as policy-as-code
• Build detection and response capability from the ground up and serve as technical lead during security incidents from detection through containment to post-incident review
• Own vulnerability disclosure and penetration testing programs, driving remediation directly with product teams
• Support compliance initiatives (ISO 27001, SOC 2, GDPR) with real technical controls and evidence, and assist with customer security reviews alongside sales
• Shape the security direction as a hands-on senior engineer, building practical guardrails that engineers want to use

What We're Looking For

• 7+ years of hands-on security engineering experience, including several years owning application and cloud security for a production SaaS platform end to end
• Proven track record building security programs—SDLC, vulnerability management, detection and response—not just operating inherited tools
• Expert-level understanding of vulnerability classes and attack techniques beyond OWASP Top 10: ability to threat-model features, identify authorization flaws in code review, and explain exploit paths to engineers
• Deep experience hardening cloud infrastructure at scale (AWS preferred, GCP or Azure acceptable): IAM, network segmentation, container security, security-as-code designed by you
• Strong software engineering skills: you write production-quality code, build automation from scratch, and participate meaningfully in architecture discussions with senior engineers
• Proven incident response leadership: you've been the technical lead when things went wrong
• Judgment to make risk-based decisions under ambiguity and influence teams to act without formal authority
• Excellent English required; German is a plus
• Willingness to work on-site 3 days per week in Munich
• Nice to have: experience building security functions at scale-ups, detection engineering, ISO 27001/SOC 2 certification experience, certifications like OSCP or CISSP (hands-on skills matter most)

How We Work With You

As a specialized recruiting firm, Get A Job.ai connects exceptional security talent with confidential opportunities. When you apply through our platform, our talent team will conduct an initial screening to understand your experience and goals. If there's a strong match, we will submit your profile to our client for consideration. Please do not attempt to contact the client directly—all communication flows through Get A Job.ai to ensure a professional process for everyone involved.

Pay

Compensation details will be discussed during the screening process and are competitive for a senior security engineering role in the Munich market. Our client also offers equity participation, annual development budget, wellness benefits, pension contributions, and other perks that we'll share with qualified candidates.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from candidates of all backgrounds and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.